This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json) Hash identifier: wSbj74lLD1+zijjSrnTxIZy/5pe55ILS/6+KEqngHw8= Subject key identifier: F7:48:1F:18:2D:83:20:D6:50:44:34:9A:0E:C3:67:4A:66:BA:CC:73 Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Certificate serial: 019B71104CB49E40A7A1FAA563502862FB50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 21:00:52 +0000 Manifest this update: Tue 30 Dec 2025 21:00:52 +0000 Manifest next update: Wed 31 Dec 2025 21:00:52 +0000 Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=) 2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: MlNvbhRsKatvqcIrB+g/OQHCPCdCtfmCpuTe5q+QHnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:4c:b4:9e:40:a7:a1:fa:a5:63:50:28:62:fb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Validity Not Before: Dec 30 21:00:52 2025 GMT Not After : Dec 31 21:00:52 2025 GMT Subject: CN=f7481f182d8320d65044349a0ec3674a66bacc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:2d:a0:15:55:f5:c1:2f:92:e2:9f:9f:5a: 99:e6:72:95:42:8c:fc:a0:7a:8e:4e:e5:d3:eb:c4: 91:ce:fa:89:40:8b:9e:1c:1f:de:15:3d:d8:1d:cf: a2:ec:99:d3:c8:72:2c:fa:d6:2d:bf:76:79:d3:c3: ac:19:fb:27:4f:24:57:22:42:88:d6:04:33:73:13: be:95:52:f9:01:53:a6:76:f9:c4:9c:bf:41:f5:41: f8:f0:86:c0:5c:38:49:dc:8c:06:74:ed:60:ba:5a: 92:5e:99:39:9e:67:6d:d9:87:fc:b5:5f:fa:87:c5: 26:b2:59:fb:a9:eb:39:a9:a0:f2:82:fe:9f:6c:84: 3f:de:3b:ce:4c:7d:a1:43:77:f7:fa:4f:40:cc:b1: c3:45:fa:fe:22:24:d8:6a:a6:a4:7c:8c:e8:c3:b7: 3d:b0:34:e7:75:e2:43:5e:4b:6e:82:fb:d2:a4:5b: 1f:03:63:b6:db:c2:23:cb:0d:79:bd:07:a8:e7:b8: 86:0f:70:cb:cd:38:3e:06:bd:80:31:03:b3:b9:84: 47:cd:ea:e2:8e:ba:e3:e0:cc:15:47:e1:83:9f:59: 17:65:ae:d3:3e:cb:75:3d:4c:a8:4d:70:ff:8c:5e: 2f:58:61:27:ea:97:76:85:8a:f1:8f:49:50:2b:6a: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:48:1F:18:2D:83:20:D6:50:44:34:9A:0E:C3:67:4A:66:BA:CC:73 X509v3 Authority Key Identifier: keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5b:11:dd:8c:47:52:60:17:4f:35:3f:fd:81:f4:d4:69:cf: be:22:43:1d:ac:7a:a2:98:0e:34:40:16:8b:3a:9b:e7:9f:16: 2f:5b:37:36:ba:a3:1e:90:1f:43:44:42:bc:43:60:88:44:8e: d3:45:63:13:13:7e:23:3e:3c:c6:a9:b1:66:0f:6d:49:d2:42: ad:17:4c:38:e0:9e:ca:20:78:1c:e1:65:55:31:73:d2:62:7f: 2c:60:6e:28:55:84:63:c1:26:d6:bc:c0:a3:6e:d8:98:16:34: ec:17:7f:2e:3f:05:7a:db:b5:1d:ea:b0:ca:98:04:9c:7c:37: 15:c9:48:ce:21:81:18:34:d1:f4:c3:3b:59:11:6f:3a:f1:96: 25:f1:9b:cd:01:c9:7c:8e:ec:d0:17:48:85:0e:be:27:77:f7: be:93:6c:5e:02:00:b3:10:c6:c2:25:50:e2:e1:c7:1e:1f:12: 49:f9:83:c4:fb:5b:f8:16:38:a7:45:57:d9:dd:f6:0f:cd:48: 77:6b:8a:a5:32:79:82:7a:33:14:d1:94:5e:9b:28:fb:bb:cf: f2:30:25:05:e2:de:06:52:9c:90:b9:0a:bc:46:22:bb:2f:3e: e9:32:1b:00:fa:35:8b:23:3f:61:5c:58:66:1d:93:8b:c7:11: 09:75:29:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEEy0nkCnofqlY1AoYvtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzJhZWYwMDY3YzRmMGJhMjBlZTY2NjM0NDAwMDViMWIz Yjg4N2IwHhcNMjUxMjMwMjEwMDUyWhcNMjUxMjMxMjEwMDUyWjAzMTEwLwYDVQQD EyhmNzQ4MWYxODJkODMyMGQ2NTA0NDM0OWEwZWMzNjc0YTY2YmFjYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbItoBVV9cEvkuKfn1qZ5nKVQoz8 oHqOTuXT68SRzvqJQIueHB/eFT3YHc+i7JnTyHIs+tYtv3Z508OsGfsnTyRXIkKI 1gQzcxO+lVL5AVOmdvnEnL9B9UH48IbAXDhJ3IwGdO1gulqSXpk5nmdt2Yf8tV/6 h8Umsln7qes5qaDygv6fbIQ/3jvOTH2hQ3f3+k9AzLHDRfr+IiTYaqakfIzow7c9 sDTndeJDXktugvvSpFsfA2O228Ijyw15vQeo57iGD3DLzTg+Br2AMQOzuYRHzeri jrrj4MwVR+GDn1kXZa7TPst1PUyoTXD/jF4vWGEn6pd2hYrxj0lQK2ps2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdIHxgtgyDWUEQ0mg7DZ0pmusxzMB8GA1UdIwQY MBaAFJ4yrvAGfE8Log7mZjRAAFsbO4h7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYt YzMxYzZkODY5MWQwLzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYtYzMxYzZkODY5MWQw LzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVsR3YxH UmAXTzU//YH01GnPviJDHax6opgONEAWizqb558WL1s3NrqjHpAfQ0RCvENgiESO 00VjExN+Iz48xqmxZg9tSdJCrRdMOOCeyiB4HOFlVTFz0mJ/LGBuKFWEY8Em1rzA o27YmBY07Bd/Lj8Fetu1HeqwypgEnHw3FclIziGBGDTR9MM7WRFvOvGWJfGbzQHJ fI7s0BdIhQ6+J3f3vpNsXgIAsxDGwiVQ4uHHHh8SSfmDxPtb+BY4p0VX2d32D81I d2uKpTJ5gnozFNGUXpso+7vP8jAlBeLeBlKckLkKvEYiuy8+6TIbAPo1iyM/YVxY Zh2Ti8cRCXUpAg== -----END CERTIFICATE-----Generated at Wed Dec 31 01:50:12 2025 by rpki-client